This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File:                     ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier:          92J20V8W04e+9pIEePOUsRCMmiL7AV4dEGraNTts9mg=
Subject key identifier:   70:E8:A6:07:B7:8B:E5:F9:FB:A2:25:A9:9E:F3:A2:EE:D4:6B:D1:D4
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer:       /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial:       019C443513FD59E3190053C039ADDF935FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 21:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:55 +0000
Files and hashes:         1: 60TwTXZ3s8c9GnAKSlAJ3NgM0QI.roa (hash: EZkxwCyWCEu1KeBrV5jR0jwiImpY2bsUjKB0OADSv0M=)
                          2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: Y1WXv/8+jMDMTBRHS9Nui5HbLcRK3lWe/eGmg84K9Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:13:fd:59:e3:19:00:53:c0:39:ad:df:93:5f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
        Validity
            Not Before: Feb  9 21:00:55 2026 GMT
            Not After : Feb 10 21:00:55 2026 GMT
        Subject: CN=70e8a607b78be5f9fba225a99ef3a2eed46bd1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:81:8b:c6:61:6f:b9:3c:76:8c:dc:65:c4:
                    44:1c:0f:f1:cb:0c:32:03:18:1c:dd:61:5b:d5:7c:
                    90:aa:01:24:af:97:06:f1:7d:ba:91:ca:53:d1:6c:
                    f3:08:48:1c:2e:dd:b8:0a:e9:47:67:7d:70:23:d6:
                    bd:dc:f3:02:8c:51:43:0f:95:be:bf:a2:a4:d4:42:
                    e6:a0:4c:af:78:7a:de:9a:70:9b:83:26:12:1b:ff:
                    31:fb:ec:7e:24:47:d9:1f:66:71:0b:3f:92:ef:6e:
                    54:ca:2e:d5:8d:e1:4f:40:b0:52:b8:90:2c:f9:10:
                    0f:0f:b0:bf:07:47:1b:b2:51:b5:a4:31:90:7c:c0:
                    0d:e2:74:68:06:4e:cf:05:bb:86:2f:cb:ec:50:3f:
                    86:5b:d6:3d:9c:d0:4d:91:7c:d6:b8:66:fa:c7:10:
                    25:eb:c0:ac:3d:d1:13:34:2a:97:79:c8:fd:cb:c4:
                    d6:83:c9:9a:d7:2e:9b:2c:95:00:9d:14:b8:e1:5c:
                    c8:04:31:c0:2b:bc:d8:f9:a5:45:82:99:62:17:bc:
                    29:7b:a4:4e:52:27:ee:77:3a:3a:30:3a:f6:83:c3:
                    48:ca:09:ec:75:dd:3f:41:a9:f9:16:41:25:54:ad:
                    31:01:9a:97:e0:2d:1c:75:3b:d6:bf:71:fe:8b:7b:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:A6:07:B7:8B:E5:F9:FB:A2:25:A9:9E:F3:A2:EE:D4:6B:D1:D4
            X509v3 Authority Key Identifier:
                keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3a:b0:b3:47:19:e8:5b:0e:61:e8:9a:ce:a4:4c:75:32:9d:
         8a:f6:2b:29:db:04:7a:ae:79:4d:1d:d3:1e:42:4b:e1:a7:84:
         54:f4:30:2b:33:fd:36:32:7f:3e:ef:a2:46:36:5d:c6:16:47:
         a8:e5:27:e8:df:c0:64:56:65:90:3b:c0:c5:14:45:a7:f9:11:
         f8:79:4f:3c:46:93:d4:a7:ef:90:29:27:30:f6:87:e3:96:45:
         c3:0b:e3:a4:fd:70:5b:9d:b6:71:2f:b5:06:3f:91:b7:58:c1:
         4a:c8:12:02:f8:2a:fe:bc:ce:05:35:98:51:63:b6:b4:8c:23:
         ab:a3:a7:58:42:e5:20:c0:54:d8:e4:d0:6f:fe:24:e0:9f:67:
         fb:49:1a:84:0a:33:a9:17:21:f0:db:dc:8d:55:c1:d8:80:35:
         de:73:4c:28:84:50:d4:b1:85:c1:99:39:59:53:e5:58:b8:ce:
         f9:dd:53:38:3b:7e:87:6d:f2:31:65:21:d2:a1:6f:25:49:57:
         3f:ae:08:5d:fc:53:58:b7:cc:06:9d:33:0d:23:9f:b2:cb:5d:
         27:84:36:72:27:0b:12:e1:12:e1:d0:9e:d1:ca:1a:2d:68:3f:
         63:de:ac:60:2b:5e:46:bd:58:c8:07:49:65:5d:83:ec:5a:06:
         a5:c8:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:01:34 2026 by rpki-client